Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/fBEPY6SMS9c_VhHhAkhAXouGnvk.roa
File: fBEPY6SMS9c_VhHhAkhAXouGnvk.roa (raw, json)
Hash identifier: 8+TJCeRq72OTPp1UuFHJjkYVdOoANRDbaqZyAeNK4OM=
Subject key identifier: 7C:11:0F:63:A4:8C:4B:D7:3F:56:11:E1:02:48:40:5E:8B:86:9E:F9
Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a
Certificate serial: 019945276CC575A48B907BF09A364AAC961A
Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/fBEPY6SMS9c_VhHhAkhAXouGnvk.roa
Signing time: Sat 13 Sep 2025 22:17:15 +0000
ROA not before: Sat 13 Sep 2025 22:17:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202512
IP address blocks: 45.92.40.0/24 maxlen: 24
2a0e:1cc0:b00b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:45:27:6c:c5:75:a4:8b:90:7b:f0:9a:36:4a:ac:96:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a
Validity
Not Before: Sep 13 22:17:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c110f63a48c4bd73f5611e10248405e8b869ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fe:00:9a:3c:a8:9b:5e:98:2d:60:bf:09:c1:
88:80:78:e1:ea:60:22:03:78:48:51:92:c7:28:c3:
ec:bc:96:b8:d7:c3:e7:8f:36:36:a6:e0:f6:ad:25:
a3:f2:a2:50:2b:ac:e3:12:47:3d:41:b3:86:7e:52:
da:9f:71:97:28:d9:6c:1a:85:99:1c:0a:ca:3f:4a:
a9:87:9b:c6:1e:23:16:28:be:49:b5:e6:96:3a:41:
ba:6e:d9:ff:6d:67:16:c9:f2:fd:d3:1f:ba:1c:31:
1a:e5:bd:d0:b6:2d:cf:ee:47:cd:34:83:9f:b0:47:
8f:21:10:96:ae:26:5d:5b:5e:43:75:cb:00:a2:1a:
80:a8:37:27:8c:81:2a:54:71:3a:88:54:e0:c6:f5:
24:be:ab:d8:ba:79:4e:af:6c:7a:d6:b7:8b:76:84:
27:7a:8f:ee:00:cb:b1:68:f6:89:04:e2:71:43:3f:
7d:a8:13:11:83:6f:65:1a:f1:71:71:d9:af:10:d1:
16:83:8c:3b:ae:21:45:5e:3d:a3:d9:ce:d3:71:79:
42:fc:23:19:2c:a3:f8:0c:b7:52:9c:10:6d:ac:0c:
9a:3c:a2:8b:58:59:87:86:40:8f:ac:4e:7d:7b:c3:
7b:c3:c2:dc:9e:2b:2d:04:07:fb:51:c0:b5:45:d1:
4d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:11:0F:63:A4:8C:4B:D7:3F:56:11:E1:02:48:40:5E:8B:86:9E:F9
X509v3 Authority Key Identifier:
keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/fBEPY6SMS9c_VhHhAkhAXouGnvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.40.0/24
IPv6:
2a0e:1cc0:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
44:22:ff:e9:10:f9:15:48:b9:dd:d8:41:d3:e4:0a:72:84:8a:
1d:98:64:c9:d3:2a:6b:41:52:c9:db:72:2f:cf:58:a3:12:b8:
48:04:ab:1d:c6:54:64:c9:45:74:b4:97:63:1b:b5:67:34:6b:
0a:9c:d9:e2:bb:15:8f:3d:b8:ca:2b:0c:f2:a5:8b:2f:ac:41:
94:a0:91:51:1c:04:a0:35:b5:f0:70:a7:cf:b7:6c:14:36:f9:
4d:fb:64:94:17:e2:95:55:1d:01:f9:49:3d:28:e6:93:3e:9c:
5f:04:fd:87:3c:49:72:4e:fe:2f:ca:93:c7:84:48:14:71:e2:
b8:e2:c2:ae:83:5b:6d:a4:38:35:7f:73:f0:2f:e7:a2:0f:fd:
9a:f9:23:da:56:8c:d2:e2:45:9b:c3:e1:b1:23:b3:d6:16:61:
59:1b:d9:be:5d:31:11:ee:ac:0d:b6:ef:b2:f8:1e:fc:64:dc:
a9:5d:93:fa:0f:d3:53:be:08:70:10:38:d0:79:08:bc:fb:3c:
b9:64:c0:4e:43:39:71:22:f9:a0:cc:03:d6:83:b9:32:6e:97:
91:b1:b9:2c:95:7c:b4:ac:07:2b:1d:26:56:94:72:7a:47:10:
21:95:02:c0:94:09:65:45:39:79:c8:52:6d:a7:77:d8:e7:00:
d8:9b:c9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 18:28:49 2025 by rpki-client